Insights on application security, vulnerability research, and building secure software at scale.
Subscribe via RSS
How OpenHack found, validated, and verified a missing await that turned Papermark's authenticated upload route into a public pipe for unlimited uploads.
OpenHack correlated 37 npm typosquats carrying the same install-time dropper, decoded its XOR-obfuscated configuration, and traced a Windows and WSL infostealer chain from npm postinstall to credential exfiltration.
OpenHack is your Always on AI Security Engineer. Find the vulnerabilities. Prove the impact. Ship the fix.
